Brian May wrote: > > 2. Get rid of maintainer scripts (don't ask me how...) so that > upgrading packages is guaranteed not to destroy your computer, even if > the package came an from untrusted source. This could be carried > further by saying "no daemons can be started by UID=root without > express permission by some protected config file". Perhaps maintainer > scripts can run from a chroot and/or non-root environment (issues > remain unsolved).
Won't ask you how :) Here's a MFTL sol'n :) You need to devise a package description/configuration language that is declarative rather than procedural. What comes to my mind would be some sort of "logical language", maybe something based on Prolog. That the statements as your example would be implemented with it and then the package interpreter would handle the "procedural" aspects of upgrading. No religious wars, all right? :) Cheers, -- Eray (exa) Ozkural Comp. Sci. Dept., Bilkent University, Ankara e-mail: [EMAIL PROTECTED] www: http://www.cs.bilkent.edu.tr/~erayo